I mean think about it, passkeys usually work by you registering passkeys in the database of an account you already have ....

Well why not registering these passkeys in your DNS records... In fact I think this should be doable in normal DNS except that;
1. Most people don't have domains at all.
2. DNS by default is not authenticated, and even if you use DNSSEC, you are relying on certificates by central authorities.